Static task
static1
Behavioral task
behavioral1
Sample
0eeae90ad71f78153951ec081eea7c74_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0eeae90ad71f78153951ec081eea7c74_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0eeae90ad71f78153951ec081eea7c74_JaffaCakes118
-
Size
14KB
-
MD5
0eeae90ad71f78153951ec081eea7c74
-
SHA1
de65158a49920e91b8ebc50c0a0e64a7928dc93b
-
SHA256
473a78dfef1d9a88ff9d23f3a9ef1d5056656b4a08e659aa40ab76fdff606779
-
SHA512
4133e15d51b67ed39896ede176248a179ee666f9069c258af31d09aed61cb088e5f13f6058941e2f4f59bd83fc654f85c1363b977dfc0fa2811967928ba88243
-
SSDEEP
192:xpS8Wh2GOunU7R5WCufXl0j6WoSV9U1EnAJZj9a6VPduu2G9XjEYjETLGEI6JmLr:xpS8c2GOugR5WCklY6o9AhPshI6OF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eeae90ad71f78153951ec081eea7c74_JaffaCakes118
Files
-
0eeae90ad71f78153951ec081eea7c74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 206B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE